[devel] I: LTO in %optflags by default

[Ivan A. Melnikov]

On Wed, Aug 25, 2021 at 09:53:29AM +0300, Andrey Savchenko wrote:
> On Wed, 25 Aug 2021 08:46:40 +0300 Denis Medvedev wrote:
>  
> > -fstack-protector-all -Wstack-protector --param ssp-buffer-size=4
> > choice of "-fstack-protector" does not protect all functions . You need -fstack-protector-all to guarantee guards are applied to all functions, although this will likely incur a performance penalty. Consider -fstack-protector-strong as a middle ground.
> > The -Wstack-protector flag here gives warnings for any functions that aren't going to get protected.
> > 
> > -fstack-clash-protection
> > Defeats a class of attacks called stack clashing.
> 
> Эта может поломать много приложений и может быть значимый удар по
> производительности.

А разве -fstack-clash-protection уже не включен в нашем gcc10
по умолчанию?

-- 
  wbr,
    iv m.